search

bshaffer / oauth2-server-php

A library for implementing an OAuth2 Server in php
http://bshaffer.github.io/oauth2-server-php-docs
MIT License
3.26k stars 950 forks source link

Server side access token revocation #893

Closed nikhil-dhiman closed 7 years ago

nikhil-dhiman commented 7 years ago

Hi, Is there a way to revoke user access token/refresh token from server itself. Basically we want to deal with users who are marked as spammer/fraud. So we want to logout them immediately whenever any event specified them as spammer or fraudster. I can do a dirty check by doing at interceptor level, but want to do it by having a cleaner approach.

bshaffer commented 7 years ago

There is nothing specifically supported in this library, only that the user_id field in the various storage classes can be used to query the tables and remove the tokens.